Storage Viewer role added to Object Storage
The following announcement for a new Object Storage feature was written based on information available in October 2023. For the latest information about KakaoCloud Object Storage, see Object Storage.
Hello, we are announcing changes to the Object Storage permission system.
The permission system of Object Storage is slightly different from the IAM permission system. Unlike IAM, Object Storage has detailed roles so that permissions can be configured not only for buckets but also for individual objects.
In this release, the "Storage Viewer" role has been added to Object Storage permission settings. This role is granted permission to view bucket metadata information and object metadata.
With this change, users with the "Project Reader" permission in IAM roles are granted the "Storage Viewer" permission in Object Storage. In addition, "Project Admin" in IAM roles is granted the "Storage Admin" permission in Object Storage roles, and "Project Member" is granted the "Storage Editor" permission. This part remains unchanged from before.
For more detailed role definitions, see the following image comparing IAM and Object Storage roles. This role system applies to both kr-central-1 and kr-central-2.
Permission setting architecture
In the console, you can add or modify the new "Storage Viewer" role for members in the [Add role] pop-up window in the same way as before.
Bucket role settings
For instructions on creating and managing buckets with detailed role configuration, see the detailed tutorial guide.
KakaoCloud users can use object-based storage optimized for storing and processing large volumes of data as objects in Object Storage. For more information about Object Storage, which enables more precise permission management through role-based access control, see the technical documentation.
We will continue working to provide safer and more convenient cloud services.
Thank you.